Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e332e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e332e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          btWXxkWrmpSaltnUMXJTHzBfuVHN7V9YETH4Fj2QUV4=
Subject key identifier:   FF:FE:14:2B:18:64:80:AE:F1:AE:0A:C8:9C:D1:80:47:4A:87:9F:EF
Certificate issuer:       /CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
Certificate serial:       30B4256C3E99B2DB02A96C42B618425ED11511FA
Authority key identifier: EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e332e302f32342d3234203d3e20323637343430.roa
Signing time:             Mon 01 Apr 2024 14:35:56 +0000
ROA not before:           Mon 01 Apr 2024 14:30:56 +0000
ROA not after:            Mon 31 Mar 2025 14:35:56 +0000
asID:                     267440
IP address blocks:        192.141.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b4:25:6c:3e:99:b2:db:02:a9:6c:42:b6:18:42:5e:d1:15:11:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
        Validity
            Not Before: Apr  1 14:30:56 2024 GMT
            Not After : Mar 31 14:35:56 2025 GMT
        Subject: CN=FFFE142B186480AEF1AE0AC89CD180474A879FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:36:26:0d:c3:b9:60:1e:ad:ef:aa:c6:ac:
                    2e:d5:dc:81:22:cc:6a:ed:d3:95:df:63:ae:38:cd:
                    24:f6:a0:b6:f1:0a:58:0a:7f:27:c8:74:bf:30:bc:
                    23:61:f3:c8:b2:53:45:5e:32:49:8c:fe:fe:ab:8f:
                    fb:ff:77:8a:2e:be:60:79:0b:f5:b7:bc:88:97:61:
                    7d:55:a3:9f:56:86:54:ca:48:ee:13:85:a8:ad:bd:
                    7f:3f:77:e3:50:71:3e:de:cb:d9:9e:76:95:66:6e:
                    78:0a:67:5c:32:2d:b9:bb:42:e0:13:55:f9:80:43:
                    e3:b9:62:a5:42:d6:5a:5e:7b:37:85:cb:7e:bf:9f:
                    e0:5f:bb:92:1a:8f:09:c3:79:07:a2:7d:2d:1f:31:
                    a1:8d:30:e5:b8:47:44:99:1c:86:4f:d7:14:25:77:
                    29:be:64:07:50:75:65:b6:84:96:08:9a:4f:a5:86:
                    f6:00:4f:f3:f1:c0:d7:ed:fe:f5:2f:63:ab:f7:13:
                    cd:74:4a:a6:0c:47:31:f2:ce:04:71:46:ff:f6:9a:
                    e7:d7:da:a9:06:78:41:14:d9:e8:ec:68:bd:d6:5d:
                    0c:04:e7:26:c8:88:48:fb:47:1e:02:99:1d:e2:92:
                    3d:05:fc:00:59:08:53:61:6f:33:13:b6:d1:c1:af:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:14:2B:18:64:80:AE:F1:AE:0A:C8:9C:D1:80:47:4A:87:9F:EF
            X509v3 Authority Key Identifier:
                keyid:EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e332e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:20:ed:72:a6:cb:7d:e3:90:50:1b:0e:47:5c:60:85:ee:04:
         82:f5:44:01:28:06:15:47:c6:9d:03:28:9e:1d:92:1c:04:18:
         f8:e9:d0:a8:d4:a3:7d:26:88:a3:34:f7:7f:b9:20:31:b0:c0:
         28:8a:b5:5a:d3:60:25:2b:74:1d:8f:54:d9:77:d7:9c:3a:53:
         c5:04:c4:0b:70:db:8e:d6:f0:31:d2:1e:42:69:e7:c0:e8:df:
         06:be:1e:54:e8:8a:c3:a0:bc:78:c6:1c:5b:97:0f:47:76:ae:
         20:b7:96:da:79:b7:48:6e:da:75:12:78:24:59:d9:cd:ec:50:
         c9:a1:f7:fb:f8:92:95:06:30:e8:54:75:08:9e:5f:ce:09:a0:
         36:cf:32:2a:e2:41:a8:cf:8b:04:fa:29:64:01:2f:e3:d3:c1:
         f1:f5:6c:82:56:f9:01:cd:c6:3b:46:da:19:e7:90:42:52:6d:
         90:4d:1e:cc:11:ab:88:fc:b1:93:7d:cf:96:4d:94:a5:39:7c:
         93:63:06:43:ed:c5:c8:c6:64:39:e4:60:03:7f:b0:ee:6e:62:
         e9:d0:7c:22:c9:39:80:e6:e6:23:12:4d:b5:92:59:70:ef:d5:
         c6:64:7f:d8:de:2f:e3:9c:2e:e6:2a:e1:ba:3b:eb:af:89:6a:
         28:4c:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org